Privacy Policy
Last Updated: January 15, 2025
At driftfluxmotion, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you interact with our financial analysis platform. We're based in Thailand and follow local regulations while maintaining international standards for data protection.
Information We Collect
We gather different types of information depending on how you use our services. Some data you provide directly, while other information is collected automatically through your interactions with our platform.
Personal Information You Provide
When you register for our services or contact us, you might share:
- Full name and contact details (email address, phone number)
- Business information including company name and tax identification numbers
- Financial data related to analysis requests and reporting needs
- Payment information processed through secure third-party providers
- Communications you send us through email, contact forms, or support channels
Automatically Collected Data
Our systems collect certain information when you visit our website:
- IP address and approximate geographic location
- Browser type, device information, and operating system
- Pages visited, time spent on our site, and navigation patterns
- Referring website addresses and search terms used to find us
- Technical data about your connection and device capabilities
| Data Category | Purpose | Retention Period |
|---|---|---|
| Account Information | Service delivery and account management | Duration of relationship plus 3 years |
| Financial Analysis Data | Providing requested services | 5 years per Thai accounting regulations |
| Website Analytics | Platform improvement and user experience | 24 months |
| Communication Records | Support and service quality | 2 years from last contact |
How We Use Your Information
We process your data for specific business purposes that support our service delivery. Everything we do with your information connects to providing you with better financial analysis tools and maintaining our platform.
Primary Uses
We use collected information to deliver the financial analysis services you've requested, maintain and improve our platform functionality, process payments and manage your account, respond to your inquiries and provide customer support, and send important updates about your account or our services.
Beyond service delivery, we analyze usage patterns to understand how people interact with our platform. This helps us identify areas for improvement and develop new features that actually matter to users. We don't sell your personal information to third parties, and we're selective about who we share data with.
Legal Basis for Processing
Under Thai Personal Data Protection Act (PDPA) and international privacy standards, we process your information based on:
- Contractual necessity - to fulfill our service agreements with you
- Legitimate interests - for platform improvement and security
- Legal compliance - meeting regulatory requirements in Thailand
- Your explicit consent - when required for specific processing activities
Information Sharing and Disclosure
We share your information only when necessary to deliver our services or comply with legal requirements. Here's who might see your data and why.
Service Providers
We work with carefully selected companies that help us operate our platform. These include payment processors, cloud hosting providers, email service platforms, and analytics tools. All service providers sign agreements requiring them to protect your information and use it only for specified purposes.
Legal Requirements
Sometimes we must disclose information to comply with Thai law or respond to valid legal processes. This happens when we receive court orders, respond to government requests with proper authorization, or need to protect our legal rights. We review each request carefully and provide only what's legally required.
We'll notify you about legal demands for your information unless prohibited by law or when the request involves imminent harm. Your right to know about these situations matters to us.
Business Transfers
If driftfluxmotion is acquired by or merges with another company, your information would be transferred as part of that transaction. We'd notify you before any such transfer and explain your options at that time.
Your Privacy Rights
Thai PDPA gives you several rights regarding your personal information. We've built systems to help you exercise these rights efficiently.
Access Your Data
Request a copy of the personal information we hold about you. We'll provide this in a readable format within 30 days.
Correct Information
Update or correct inaccurate data in your account. Most information can be changed directly through your account settings.
Delete Your Data
Request deletion of your personal information, subject to legal retention requirements for financial records.
Restrict Processing
Limit how we use your information in certain circumstances, such as while we verify data accuracy.
Data Portability
Receive your data in a structured, commonly used format that you can transfer to another service.
Withdraw Consent
Remove consent for processing activities that require it. This may affect our ability to provide certain services.
Exercising Your Rights
To make any privacy-related request, email us at [email protected] with "Privacy Request" in the subject line. Include your name, account email, and specific request details. We'll verify your identity before processing the request and respond within 30 days as required by Thai law.
You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee if you believe we've mishandled your information.
Data Security Measures
We protect your information through multiple layers of security controls. Our approach combines technical safeguards, organizational policies, and regular security assessments.
Technical Protections
All data transmissions use TLS encryption to prevent interception. Information stored on our servers is encrypted at rest using industry-standard algorithms. We maintain firewalls, intrusion detection systems, and regular security monitoring. Access to production systems requires multi-factor authentication.
Organizational Security
Employee access to personal information is strictly limited based on job requirements. Our team receives regular training on data protection and privacy practices. We conduct background checks on employees with data access and maintain confidentiality agreements with all personnel and contractors.
Security Incidents
If we experience a data breach affecting your information, we'll notify you within 72 hours as required by Thai PDPA. The notification will explain what happened, what data was affected, and what steps we're taking to address the situation.
Despite our security efforts, no system is completely immune to attacks. We can't guarantee absolute security, but we're committed to maintaining strong protections and responding quickly if problems occur.
International Data Transfers
Our primary servers are located in data centers that meet international security standards. Some service providers we use may process data outside Thailand.
When we transfer your information internationally, we ensure adequate protections through standard contractual clauses approved by Thai authorities, verification that recipient countries have adequate privacy laws, or your explicit consent for specific transfers when required.
All international transfers comply with Thai PDPA requirements for cross-border data movement. We maintain records of these transfers and the safeguards in place.
Cookie Policy
Our website uses cookies and similar technologies to function properly and improve your experience. Here's what you should know.
Types of Cookies We Use
- Essential cookies required for platform functionality and security
- Performance cookies that help us understand how you use our site
- Functional cookies that remember your preferences and settings
- Analytics cookies from third parties like Google Analytics
You can control cookie preferences through your browser settings. Blocking certain cookies may affect platform functionality. Our cookie banner lets you manage preferences when you first visit our site.
Children's Privacy
Our services are designed for businesses and professional users. We don't knowingly collect information from anyone under 18 years old. If you're a parent who discovers their child has provided us with personal information, contact us immediately and we'll delete it.
Changes to This Policy
We update this privacy policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email or through a prominent notice on our website at least 30 days before the changes take effect.
The "Last Updated" date at the top shows when we last modified this policy. Continued use of our services after changes become effective means you accept the updated terms.
Data Retention
We keep your information only as long as necessary for the purposes described in this policy. Retention periods vary based on data type and legal requirements.
Financial analysis data must be retained for at least five years under Thai accounting regulations. Account information is kept for three years after relationship termination. Marketing communications data is deleted within 90 days of unsubscribing. Website analytics are anonymized after 24 months.
After retention periods expire, we securely delete or anonymize your information so it can no longer identify you.
Contact Us About Privacy
If you have questions about this privacy policy or how we handle your information, we're here to help. Reach out through any of these channels:
driftfluxmotion
189 Bang Khun Kong, Bang Kruai District
Nonthaburi 11130, Thailand
Phone: +66 2 985 2454
Email: [email protected]
We typically respond to privacy inquiries within 3 business days. For urgent matters related to data breaches or security concerns, mark your message as urgent and we'll prioritize your request.